Vulnerability · Published Aug 14, 2026 · Assigned by VulnCheck
CVE-2026-72820Grav 2.0.11 Path Traversal via Backup Profile Configuration
Medium 4.9
In plain English
A medium-severity path traversal in grav from getgrav. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 43% of all known vulnerabilities).
Severity (CVSS 3.1)4.9Medium
Exploit odds (30 days)0.5%top 57.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
Grav versions before 2.0.13 fail to properly validate backup profile root paths, allowing attackers to archive directories outside GRAV_ROOT when not in the hard-coded deny-list. Attackers with profile editor access can configure backup profiles with traversal paths to expose sensitive files from locations like /opt, /mnt, or /srv.
Affected products (as reported)
Weakness: CWE-22 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
References
- GitHub Security Advisory (GHSA-fch7-cpv4-w7hg) vendor-advisory
- Patch Commit patch
- VulnCheck Advisory: Grav 2.0.11 Path Traversal via Backup Profile Configuration third-party-advisory